General
- Target 2026-08-20_77aa5a12b4a663345d6a51b8c8fd5b8c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 24.4MB
- Sample260820-v84a8sgl2y
- SHA256 c49b6c8f3673d46ced552359a71ecc0d97b7de6e3b9ecd46fc9e028ebb1e589a
- MD5 77aa5a12b4a663345d6a51b8c8fd5b8c
- SHA1 5396ff8c9b430faf8dfbafd7897ddd45e523faa6
- SHA512 9c72baac6ec9509bbaee308f201047a627cce55dea6b64be739fc6e2ab953918307f7a0ff413f4ad04f6278f9f3cc544dda98cbe14d8f1cd36d32bf3dcd44108
- SSDEEP 196608:b2gxDKORtnu3jkCzWNBxx1ml4RqgE/QIc:bBDfRI3A+WNvLRhFIc
- TLSH T1C8474A46FA514AEACA6992348DAB42853770FC842F17A7C72A14F63CBCB33D55DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_77aa5a12b4a663345d6a51b8c8fd5b8c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_77aa5a12b4a663345d6a51b8c8fd5b8c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_gola.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_77aa5a12b4a663345d6a51b8c8fd5b8c_cobalt-strike_coinminer_dosia_ghostlocker_glassworm_golang_luca-stealer_poet-rat_quasar-rat
- Size 24.4MB
- SHA256 c49b6c8f3673d46ced552359a71ecc0d97b7de6e3b9ecd46fc9e028ebb1e589a
- MD5 77aa5a12b4a663345d6a51b8c8fd5b8c
- SHA1 5396ff8c9b430faf8dfbafd7897ddd45e523faa6
- SHA512 9c72baac6ec9509bbaee308f201047a627cce55dea6b64be739fc6e2ab953918307f7a0ff413f4ad04f6278f9f3cc544dda98cbe14d8f1cd36d32bf3dcd44108
- SSDEEP 196608:b2gxDKORtnu3jkCzWNBxx1ml4RqgE/QIc:bBDfRI3A+WNvLRhFIc
- TLSH T1C8474A46FA514AEACA6992348DAB42853770FC842F17A7C72A14F63CBCB33D55DB8344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.